Protecting your personal data

We are delighted that you are interested in our website and our offer. Protecting your personal data is very important to us and is a key issue. We take data protection very seriously, particularly where it pertains to collecting, transferring, processing, and using your personal data for the purposes of your visit on our website Headache-Hurts.com.

Person responsible for data protection and publisher:

Zentrum für Forschung und Diagnostik bei Implantaten, Entzündungen und Schmerzen (ZIES) gemeinnützige Gesellschaft mbH

Managing Director Karin Frisch
Kirschwaldstraße 19 / D–60435 Frankfurt am Main
Tel.: +49 (0) 69 175542270       Fax: +49 (0) 69 175542279
Email: info@zies-frankfurt.de

Should you have any questions regarding the protection of your personal data or this privacy policy, please do not hesitate to contact us.

Consent to usage of data and legal basis

Simply using our website or reading this privacy policy is not a substitute for your legally required consent that we may collect, transfer, process, and use your personal data. We require your consent.

Your data will be processed and protected by us in the context of the legal regulations. In particular, these legal protective regulations include the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG, German Federal Data Protection Act), as well as the as the Telemediengesetz (TMG, German Telemedia Act). The processing of your personal data will therefore take place based on your voluntary disclosure, as well as on the basis of your consent to the processing of your data in accordance with Art. 6 No. 1 a) GDPR. The manner and extent of the processing of your data will depend on whether you are solely visiting our website for informational purposes or whether you are getting in touch with us over feedback.

Collecting and recording data when visiting our website

Below, we will explain which personal data is collected when you visit our website, and how this is used by us. Every time you access our website (including subpages), this is automatically recorded and logged. In particular, the IP address of the requesting computer may be recorded and logged. Equally, every click, every download, or any other retrieval of data that is available on our website, will be recorded and logged if necessary. The following will be recorded: file name; time of retrieval (date and time); amount of data that was retrieved or transferred; the browser which was used; a notification whether the retrieval or transfer was successful; name of the requesting domain or email. In addition, delivery and read receipts of emails may be recorded and logged if necessary.

Some websites use so-called cookies. Cookies do not damage your computer and do not contain any viruses. Cookies help to make our offer more user-friendly, effective, and secure. Cookies are small text files, which are put on your computer and stored by your browser. Most of the cookies we use are so-called “Session Cookies”. When you finish using the website, they will be deleted automatically. Other cookies will remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit. You can adjust your browser settings so that you are informed about new cookies and can allow cookies only on a case-by-case basis, block cookies either generally or in specific cases, as well as activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, this may limit the functionality of this website.

Cookies which are required to carry out the electronic communication process or to provide certain desired functions (e.g. shopping cart function) will be stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to provide technically accurate and optimised services. If other cookies are stored (e.g., cookies which analyse your browsing habits), these are handled separately in this privacy policy.

Usage and passing on of your personal data, deletion

Insofar as you have submitted or informed us of personal data, we will only use this in the context of its intended purpose, specifically in order to respond to your inquiries or to improve our offer (feedback). We only pass on your personal data to third parties if you have previously consented to this or if we are entitled or required to do this due to legal requirements (e.g., handover to law enforcement authorities). We do not operate the webserver on which our website runs ourselves, instead this is carried out by the Firma Fleischer IT Service, In der Kaupel 18, 64405 Fischbachtal. Due to the technical circumstances, we can therefore not guarantee that employees of this web host will not access this data. To prevent this company accessing your data in an impermissible manner, we have taken relevant measures to ensure that any access is lawful.

Additionally, we use the open source web analytic platform Matomo (formerly PIWIK), which also collects and processes data accordingly. Further information on this can be found at wikipedia.de

Feedback and requesting contact

There is a feedback form available on our website, which can be used for getting in touch electronically. If you use this function, the data which you enter into the input mask will be transferred to us and then stored. Sharing your email address is always optional. The information you provide will only be used to improve our offer.

If you would like us to contact you, you must state this explicitly. The personal data from the input mask will, if necessary, also be processed for the purposes of contacting you. The data will be deleted as soon as it is no longer necessary for fulfilling the purpose for which it was collected. This will be the case when the relevant conversation with the user has ended, in other words, when it is clear from the circumstances that the situation in question has been conclusively resolved.

Deletion of personal data upon revocation

As soon as you revoke your consent, we will delete your personal data. Data will also be deleted when knowledge of the data is no longer required to fulfil the purpose for which it was stored, or if its storage is or has become inadmissible for other legal reasons. If deletion is not possible for either legal or contractual reasons, we will block the relevant data.

Protection from spying on personal data by third parties

We would like to assure you that we will protect your personal data stored by us from unlawful spying by third parties, to the extent that this is reasonable and possible for us with the help of modern technical and organisational means. If we get in touch with you or you get in touch with us via email, we cannot guarantee complete data security despite the various protective mechanisms we have in place, meaning that we recommend sending sensitive information by post.

Your rights with regards to us

a) Right to confirmation and information

According to Art. 15 GDPR, you have the right to request confirmation that personal data relating to you is being processed; if this is case, you have the right to information regarding this personal data.

b) Right to rectification

According to Art. 16 GDPR, you have the right to request the immediate correction of incorrect personal data relating to you. Furthermore, you have the right, taking into consideration the processing purposes, to request the completion of incomplete personal data – including by means of a supplementary statement.

c) Right to erasure (right to be forgotten)

According to Art. 17 of GDPR, you have the right to request that any personal data relating to you be deleted immediately, unless statutory exceptions apply.

You have the right to request that we restrict the processing of your personal data if the conditions stated in Art. 18 GDPR are met.

e) Right to data portability

You have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided the conditions according to Art. 20 GDPR are met.

f) Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you, in accordance with Art. 21 GDPR.

g) Right to withdraw consent under data protection law

According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent to the processing of your personal data at any time.

If you would like to exercise your aforementioned rights, please contact the person responsible for data protection regulation provisions, see above.

Right to complain to the supervisory authority

Furthermore, according to Art. 77 GDPR, you have the right to complain to a supervisory authority. For us this is:

Der Hessische Datenschutzbeauftragte
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Tel.: +49(0)611 140 80
Fax: +49(0)611 14 08-900
Email: poststelle@datenschutz.hessen.de

Future changes to this privacy policy

We know from experience that the legal basis for data protection is subject to regular reforms, to which we may need to adapt our privacy policy. Similarly, the contents of our offer are also subject to constant changes and further developments. We therefore reserve the right to modify the present privacy policy as appropriate. Moreover, you should regularly inform yourself about potential changes to our privacy policy and to our terms of use on our website.

Stand: 04-17-2023